$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: HwCW4F6ws9cDf+KD9XilZ3eB0hZD5fhvikftyYzSjxY= Subject key identifier: 07:69:7C:DA:CC:90:5E:8E:7A:21:49:28:6F:C5:40:07:00:E4:D9:35 Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 0708 Signing time: Fri 18 Jul 2025 22:13:55 +0000 Manifest this update: Fri 18 Jul 2025 22:13:54 +0000 Manifest next update: Fri 25 Jul 2025 22:13:54 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: 1ndcUW4OeYFwqHbHPRYRDKsbNl7G6oY7OJNacZV2KTA=) 2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=) 3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=) 4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Jul 18 22:13:54 2025 GMT Not After : Jul 25 22:13:54 2025 GMT Subject: CN=687ac723-5b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:c5:67:13:9b:46:a9:e5:15:68:8a:9b:e2: 2e:24:90:80:90:b0:d9:d6:28:b0:eb:b4:1f:bd:27: ca:53:4a:9e:45:c4:e8:fc:aa:f5:50:eb:61:67:ed: 32:d4:5a:bf:e8:b8:15:30:ce:e0:16:2b:49:97:8d: b5:a1:99:e5:47:c5:0b:e8:74:74:8a:3f:21:9d:cd: 4e:fa:5f:80:78:37:c7:93:a4:83:dc:e2:0d:ee:f5: 30:f2:4d:e7:91:1c:53:68:b7:53:13:7f:3e:9d:c2: e7:a0:07:01:a1:4e:d1:a7:e2:13:5f:06:97:4e:ce: 0f:57:82:bd:d7:a6:e6:17:2d:cd:b0:3e:dd:b1:94: d7:7d:ef:b1:80:87:5d:cb:5e:c6:e9:73:d8:85:55: 1e:37:51:de:01:5d:7d:f2:8f:45:15:37:f1:9d:65: 72:25:07:16:31:72:b4:ce:d4:2b:3a:16:bb:45:ba: e2:51:89:b5:33:33:bd:e2:96:9e:bc:38:7d:d5:0d: 98:0e:a7:b5:0d:fa:f8:fa:69:60:4e:2a:ec:e6:e7: 5b:18:e7:eb:c1:e4:ea:e4:78:6e:6a:ec:7a:c9:69: 25:87:c1:f1:62:d5:f7:12:70:cc:de:da:bc:05:fd: 14:ba:9f:20:15:55:c2:34:ae:5a:29:df:50:96:93: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:69:7C:DA:CC:90:5E:8E:7A:21:49:28:6F:C5:40:07:00:E4:D9:35 X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e6:dc:e4:d4:94:8c:20:48:25:76:9b:81:41:8c:3f:b4:7c: 28:fc:97:1a:de:03:f4:c8:0d:de:08:ae:a2:4e:a5:f1:17:fd: 3f:f3:26:4f:fc:7a:ea:db:7a:7b:e9:2a:2f:18:87:e0:ee:69: cd:c7:03:4a:fa:87:4d:cf:34:d5:81:90:63:9f:d1:30:84:4b: 8a:d6:e8:cb:c3:05:59:8d:7f:88:7f:28:91:8a:01:3c:89:28: fa:6c:42:25:b5:ba:c8:c6:48:6a:59:98:ac:91:88:3d:29:ae: 29:b0:87:94:c9:c9:e4:ab:d3:89:23:4c:2f:98:42:94:39:5c: d6:b7:da:16:f1:c9:dc:f6:92:99:ef:b4:e5:68:f9:61:6c:7d: 6a:c2:f4:e8:ca:ae:9f:a3:37:18:7b:eb:7a:91:c3:9d:95:35: f8:e1:09:56:ce:9c:19:fa:16:18:3f:0b:9a:19:45:ab:6a:f8: 41:6b:1e:4a:84:48:ef:6f:9c:a7:19:4e:46:33:f6:dc:c3:9b: 3e:aa:98:d9:fd:e5:d6:6b:00:73:7b:6e:47:1b:4a:68:e1:29: 62:61:bb:2f:bd:09:51:d8:2d:ff:de:b8:9f:58:10:29:8f:5f: a9:0a:33:13:70:1c:86:c6:3b:a6:1a:a8:0b:27:6c:1a:16:9b: 26:4b:e7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUwNzE4MjIxMzU0WhcNMjUwNzI1MjIxMzU0WjAYMRYwFAYD VQQDEw02ODdhYzcyMy01Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxazFZxObRqnlFWiKm+IuJJCAkLDZ1iiw67QfvSfKU0qeRcTo/Kr1UOthZ+0y 1Fq/6LgVMM7gFitJl421oZnlR8UL6HR0ij8hnc1O+l+AeDfHk6SD3OIN7vUw8k3n kRxTaLdTE38+ncLnoAcBoU7Rp+ITXwaXTs4PV4K916bmFy3NsD7dsZTXfe+xgIdd y17G6XPYhVUeN1HeAV198o9FFTfxnWVyJQcWMXK0ztQrOha7RbriUYm1MzO94pae vDh91Q2YDqe1Dfr4+mlgTirs5udbGOfrweTq5Hhuaux6yWklh8HxYtX3EnDM3tq8 Bf0Uup8gFVXCNK5aKd9QlpO7IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdpfNrM kF6OeiFJKG/FQAcA5Nk1MB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF5tzk1JSMIEgldpuBQYw/tHwo/Jca3gP0yA3eCK6iTqXxF/0/8yZP /Hrq23p76SovGIfg7mnNxwNK+odNzzTVgZBjn9EwhEuK1ujLwwVZjX+IfyiRigE8 iSj6bEIltbrIxkhqWZiskYg9Ka4psIeUycnkq9OJI0wvmEKUOVzWt9oW8cnc9pKZ 77TlaPlhbH1qwvToyq6fozcYe+t6kcOdlTX44QlWzpwZ+hYYPwuaGUWravhBax5K hEjvb5ynGU5GM/bcw5s+qpjZ/eXWawBze25HG0po4SliYbsvvQlR2C3/3rifWBAp j1+pCjMTcByGxjumGqgLJ2waFpsmS+em -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:44 2025 by rpki-client